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Top Stories 

• Rail service for the Washington Metropolitan Area Transit Authority’s Blue, Orange, and 
Silver lines that run through downtown Washington, D.C. was partially suspended for 
about 3 hours December 16 due to a water main break that caused flooding in a subway 
station. - WTOP 103.5 Washington, D.C. (See item 4) 

• The Associated Milk Producers Inc. cheese packaging plant in Portage, Wisconsin, is 
expected to resume operations the week of December 15 after a fire broke out in a storage 
area at the facility December 12 and prompted the evacuation of about 70 employees. - 
Portage Daily Register (See item 14) 

• Crews continued efforts to clean up and disinfect the streets of Georgetown, South 
Carolina, December 16 after a water main carrying wastewater to the city’s treatment plant 
was found leaking an estimated 267,000 gallons of untreated wastewater. - WCSC 5 
Charleston (See item 1^) 

• The owner of Pharmacare and Caremerica, a pharmacy chain, pleaded guilty before a 
federal jury in Baltimore, Maryland, December 15 to submitting false claims for 
prescription refills and defrauding Medicaid and Medicare of $1.5 million. - Associated 
Press (See item 17) 
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Energy Sector 



1 . December 15, Vancouver Columbian - (Washington) Brief power outage affects 
22,000 in Clark County. Approximately 22,327 Clark Public Utilities customers in 
Clark County experienced a power outage for about an hour December 15 when a tree 
fell into a transmission line near the Evergreen substation due to strong winds. 

Source: http://www.columbian.com/news/2014/dec/15/brief-power-outage-affects- 
22000-customers/ 

2. December 12, WCBS 2 New York City - (New Jersey) Raccoon to blame for Jersey 
City power outage, PATH shutdown. A major power outage in Jersey City December 
13 left about 12,250 Public Service Electric and Gas (PSE&G) customers without 
power and suspended PATH Train service for almost 2 hours when a raccoon came in 
contact with electrical equipment at its switching station. 

Source: http://newvork.cbslocal.com/2014/12/12/maior-power-outage-in-jersev-city- 
shuts-down-most-path-service/ 

[ Return to top] 

Chemical Industry Sector 

See item 11 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 

r Return to top i 

Critical Manufacturing Sector 

Nothing to report 

[ Return to top] 

Defense Industrial Base Sector 

Nothing to report 

[ Return to top] 

Financial Seryices Sector 

3. December 15, SC Magazine - (International) Researcher identifies XSS vulnerability 
affecting Citibank website. A security researcher identified and reported a cross-site 
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scripting (XSS) vulnerability in a Web site belonging to Citibank that could allow the 
personal information, login credentials, and cookies of users and administrators to be 
stolen. 

Source: http://www.scmagazine.com/researcher-identifies-xss-vulnerability-affecting- 
citibank-website/article/388433/ 



For another story, see item 26 



[ Return to top ] 

Transportation Systems Sector 

4. December 16, WTOP 103.5 Washington, DC - (Washington, D.C.) Metro’s Blue, 
Orange, Silver lines resume service after main break. The Washington Metropolitan 
Area Transit Authority partially suspended rail service on the Blue, Orange, and Silver 
lines that run through downtown Washington, D.C. for about 3 hours December 16 due 
to a water main break that submerged rails underwater, affecting tens of thousands of 
commuters. Crews worked to repair the ruptured water main which was expected to 
take at least 13 hours. 

Source: http://www.wtop.com/654/3763819/Water-main-break-causes-maior-Metro- 
delays 

5. December 15, KTVZ 21 Bend - (Oregon) Lake Oswego man killed in crash on slick 
Hwy. 97. Winter weather conditions contributed to a string of accidents on roadways in 
Bend, Oregon, December 15, including one accident that prompted Highway 97 to 
close for more than 3 hours and a second collision that closed Highway 126 for almost 
3 hours. Freezing fog December 14 - December 15 also prompted the delay and 
cancellation of several flights at Redmond Airport. 

Source: http://www.ktvz.com/news/slick-c-oregon-roads-lead-to-crashes-one- 
fatal/30241110 

6. December 15, Asbury Park Press - (New Jersey) Truck accident in Howell shuts 
down Route 9 South. A semi-truck overturned and spilled 20 tons of stone on Route 9 
near Ford Road in Howell Township December 15 blocking all four southbound lanes 
for nearly 3 hours. 

Source: http ://w w w . app . com/story/ne ws/crime/j erse v-mavhem/20 14/12/1 5/truck- 
accident-howell-shuts-route-south/20459931/ 

7. December 15, Bay City News - (California) Weather causing SFO flight delays. San 
Francisco International Airport officials reported that inclement weather December 15 
prompted the cancellation of around 80 flights and delayed several more flights. 
Officials implemented a ground delay program that was used to slow the rate of 
arriving flights and was expected to last at least 16 hours. 

Source: http://www.sfexaminer.com/sanfrancisco/weather-causing-sfo-flight- 
delavs/Content?oid=29 14354 

8. December 15, KIRO 7 Seattle - (Montana) Seattle-Paris flight diverted to Billings, 
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Mont. A Delta Airlines flight from Seattle to Paris made an emergency landing 
December 15 in Billings, Montana, after the crew detected a smoking odor in the cabin 
of the plane. Crews evaluated the plane and continued its flight to Paris. 

Source: http://www.kirotv.com/news/news/seattle-paris-flight-diverted-billings- 
mont/njS2g/ 

For another story, see item 2 
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Food and Agriculture Sector 

9. December 16, KMTV 3 Omaha - (Nebraska) 1 shot and killed at Nebraska packing 
plant; suspect arrested. Police arrested a suspect in connection with a December 15 
shooting outside the Gibbon Packing meat-packing facility in Buffalo County that left 
one person dead. 

Source: http://www.irn.com/kmtv/news/l-shot-and-killed-at-Nebraska-packing-plant- 
suspect-arrested— 28592803 1 .html 

10. December 16, KWOA 730 AM Worthington - (Minnesota) 7,500 turkeys lost in fire in 
Lorain Township. A December 16 fire at the Meyer Turkey Farm in Lorain Township 
engulfed a bam and killed about 7,500 turkeys housed in the structure. Authorities are 
investigating the blaze that is believed to be electrical in nature. 

Source: http://kwoa.eom/news/2014/12/16/7500-turkevs-lost-fire-lorain-township 

11. December 15, KAAL 6 Austin - (Minnesota) Dangerous chemical leak under 
investigation. The Minnesota Department of Agriculture is investigating after about 
9,000 gallons of anhydrous ammonia leaked at the Watonwan Farm Service-owned 
Clarks Grove Fertilizer facility in Freeborn County December 15 prompting the 
evacuation of 15 nearby homes. The leak was contained and one firefighter was treated 
at the scene for inhalation issues. 

Source: http://www.kaaltv.com/article/stories/s3650486.shtml 

12. December 15, Associated Press - (International) Indictment accuses US halal beef 
supplier of misleading Muslims about slaughter methods. Cedar Rapids-based 
Midamar Corp., its directors, and a second company operated by the directors were 
indicted on charges unsealed December 5 for allegedly selling at least $4.9 million in 
beef mislabeled as halal to customers worldwide, falsifying export documentation, wire 
fraud, and other charges after the employees removed labels and replaced them with 
fraudulent halal-certified labels. 

Source: http://www.foxnews.com/us/2014/12/15/indictment-accuses-us-halal-beef- 
supplier-misleading-muslims-about-slaughter/ 

13. December 15, U.S. Department of Labor - (Wisconsin) Extreme temperatures and 
other safety hazards found at Birds Eye Foods plant in Darien, Wisconsin. The 
Occupational Safety and Health Administration cited Birds Eye Foods Inc. for I repeat 
and 12 serious safety violations after a May inspection of the company’s frozen-food 
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processing plant in Darien revealed that workers were exposed to extreme temperatures 
without proper protective equipment in addition to other slip, trip, and fall hazards. 
Proposed penalties total $109,400. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=27123 

14. December 14, Portage Daily Register - (Wisconsin) AMPI manager hopes plant 
shutdown will be brief after fire Friday. About 70 employees were evacuated from 
the Associated Milk Producers Inc. cheese packaging plant in Portage December 12 
after a fire broke out in a storage area at the facility. Officials were investigating the 
fire and hoped to resume operations at the plant during the week of December 15. 
Source: http://host.madison.com/news/local/crime and courts/fire-damages-ampi- 
dairy-plant-in-portage/article b0f2a0ad-782c-5907-b086-6b4a35ba4510.html 



r Return to top i 

Water and Wastewater Systems Sector 

15. December 16, WCSC 5 Charleston - (South Carolina) Georgetown wastewater leak 
not as large as initially believe, crews say. Crews continued efforts to clean up and 
disinfect the city streets of Georgetown, South Carolina, December 16 after a water 
main carrying wastewater to the city’s treatment plant was found leaking an estimated 
267,000 gallons of untreated wastewater. 

Source: http://www.live5news.com/storv/27634376/portion-of-road-shuts-down-after- 
1-million-gallon-wastewater-leak 

For additional stories, see items 4 and 32 
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Healthcare and Public Health Sector 

16. December 16, IDG News Service- (Illinois) Illinois hospital reports data blackmail. 
Clay County Hospital in Illinois notified affected patients after receiving an anonymous 
e-mail containing protected health information of some patients asking for a substantial 
payment to avoid patient data being released. Law enforcement agencies were notified 
and an investigation found the compromised data was limited to patients who visited 
the hospital on or before February 2012 and limited to name, physical address, social 
security numbers and date of birth. 

Source: http://www.computerworld.com/article/2859026/illinois-hospital-reports-data- 
blackmail.html 

17. December 15, Associated Press - (Maryland) Pharmacy owned convicted of health 
care fraud. The owner of Pharmacare and Caremerica, a pharmacy chain, pleaded 
guilty before a federal jury in Baltimore December 15 to submitting false claims for 
prescription refills and defrauding Medicaid and Medicare of $1.5 million. 
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Source: http://www.washingtonpost.com/local/pharmacv-owned-convicted-of-health- 
Care-fraud/2014/12/15/d7380f00-84cl-lle4-abcf-5a3d7b3b20b8 story.html 



18. December 12, WSOC 9 Charlotte - (North Carolina) Pharmacy technician accused of 
stealing, selling $50K in prescription drugs. A Boiling Springs pharmacy technician 
was arrested December 10 for allegedly stealing thousands of pills with an estimated 
street value of $50,000 from her employer and distributing them to others. Five others 
were also arrested and charged in connection with the alleged prescription drug ring. 
Source: http://www.wsoctv.com/news/news/local/pharmacy-technician-accused- 
stealing-selling-50k-p/njRWF/ 
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Government Facilities Sector 

19. December 16, Fredericksburg Free Lance-Star - (Virginia) Two Spotsylvania schools 
reopen following water main break. Classes were scheduled to resume at Ni River 
Middle and Wilderness Elementary School in Spotsylvania County December 16 after 
being closed December 15 due to a water main break. 

Source: http://www.fredericksburg.com/news/local/spotsvlvania/two-spotsvlvania- 
schools-reopen-following-water-main-break/article e63 1 1491-e60f-5 17f-9c88- 
2ccfd6ff 1 8de.html 

20. December 15, South Florida Sun Sentinel - (Florida) Four Broward schools searched 
and declared OK after bomb threats. Three Broward District Middle schools and one 
Elementary school were evacuated December 15 after authorities received bomb threats 
that were later believed to be prompted due to exams. 

Source: http://www.sun-sentinel.com/local/broward/sfl-plantation-school-bomb-threat- 
20141215-story.html 

21. December 15, Associated Press; WJLA 7 Washington, D.C. - (Washington, D.C.) 

Blown transformer knocks out power to buildings in D.C., causes small fire at 

OPM. No injuries were reported after a small fire in the sub-basement level of the U.S. 

Office of Personnel Management in Washington, D.C. prompted an evacuation of 
employees and caused power outages at several government buildings for several hours 
December 15 due to a mechanical failure with an electrical transformer. The lights at 
the White House also flickered briefly in an unrelated accident when a cable was 
severed during construction. 

Source: http://www.wila.com/articles/2014/12/blown-transformer-knocks-out-power- 
to-buildings-in-d-c-causes-small-fire-at-opm-109812.html 

22. December 15, KION 46 Monterey - (California) City of Salmas still reporting phone service 
outages. Crews continued work to restore service to about 100 city government lines in the 
City of Salinas December 15 following an outage that occurred December 12 due to strong 
winds and heavy rain. 

Source: http://www.kionrightnow.com/news/local-news/citv-of-salinas-still-reporting-phone- 
service-outages/30242540 
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23. December 14, USA Today - (Oregon) Police arrest 2nd suspect in shooting at Ore. 
high school. Two suspects were arrested by Portland Police December 13 in 
connection to the December 12 shooting when a gunman opened fire and injured 4 
people near Rosemary Anderson High School. Authorities are searching for a third 
suspect in connection with the shooting. 

Source: http://www.usatodav.com/storv/news/nation/2014/12/13/police-arrest-suspect- 
portland-shooting/20350217/ 

r Return to top i 

Emergency Services Sector 

24. December 16, Oxford Hills Sun Journal - (Maine) Wiring stolen from the Bucklleld 
Fire-Rescue Station. More than 100-feet of electrical wiring was reported missing 
from the walls of a fire and rescue station under construction in Buckfield December 
11. The Oxford County Sheriff’s Office is investigating the theft. 

Source: http://www.sunioumal.com/news/oxford-hills/2014/12/16/wiring-stolen- 
buckfield-fire-rescue-station/ 1631298 

25. December 13, Associated Press - (Minnesota) Officer convicted of using fake ID to 
wire money. A St. Paul Police Department officer was convicted of felony electronic 
identity theft in Ramsey County District Court December 12 for using a fake identity to 
wire $1,500 to a her gang-member boyfriend in prison. 

Source: http://www.faribaultcountvregister.com/page/content.detail/id/757167/Officer- 
convicted-of-using-fake-ID-to-wire-monev.html?isap=l&nav=5050 
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Information Technology Sector 

26. December 16, Securityweek - (International) Banking trojan abuses Pinterest in 
C&C routines. Researchers with Trend Micro identified a variant of the BANKER 
malware known as TSPY_B ANKER. YYSI that is currently targeting users of South 
Korean banking Web sites via redirection to a phishing site and accesses comments on 
the Pinterest social network instead of a command and control (C&C) server. The 
comments are decoded into IP addresses for the server hosting the phishing page. 
Source: http://www.securitvweek.com/banking-trojan-abuses-pinterest-cc-routines 

27. December 16, Securityweek - (International) CA Technologies fixes vulnerable CA 
Release Automation. CA Technologies released a patch for its CA Release 
Automation continuous delivery system that closes a cross-site request forgery (CSRF), 
cross-site scripting (XSS), and SQL injection vulnerability in previous versions of the 
product. 

Source: http://www.securitvweek.com/ca-technologies-fixes-vulnerabilities-ca-release- 
automation 
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28. December 15, Threatpost - (International) Shellshock worm exploiting unpatched 
QNAP NAS devices. Researchers with the SANS Institute stated that network attached 
storage (NAS) devices manufactured by QNAP may still be vulnerable to attackers 
exploiting the Bash flaw that was patched previously due to the complexity and lack of 
automation in the patching process. The researchers published two hashes that have 
been used in recent attacks to perform click fraud against the JuiceADV advertising 
network. 

Source: http://threatpost.com/shellshock-worm-exploiting-unpatched-qnap-nas- 
devices/109870 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

29. December 16, Bloomberg News - (Washington) Amazon evacuates Seattle office 
after threatening note found. The Amazon.com Inc. headquarters in Seattle was 
evacuated and employees were sent home as a precaution December 15 after a threating 
note was found in a bathroom within the office building. Police investigated and 
cleared the scene after finding that no threat existed. 

Source: http://www.bloomberg.com/news/2014-12-15/amazon-evacuates-seattle- 
headquarters-after-threat-police-sav.html 

30. December 15, California News Service - (California) 8 displaced after condo fire in 
Del Cerro. A non-injury fire at a condominium complex in Del Cerro December 15 
caused an estimated $300,000 in damage and displaced eight residents. The cause of 
the fire was ruled accidental. 

Source: http://www.sandiego6.com/news/local/8-displaced-after-condo-fire-in-Del- 
Cerro-285 84375 Thtml 

31. December 15, WPXl 11 Pittsburgh - (Pennsylvania) 8 hospitalized, dozens displaced 
after carbon monoxide leak in Baldwin. Eight residents were sent to area hospitals, 
including four that were labeled “red patients” following a carbon monoxide leak at the 
Westminster Apartments complex in Baldwin December 15. Residents from about 25 
apartment units were temporarily displaced while crews worked to contain the leak that 
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is believed to have come from a hot water tank in the building’s basement. 

Source: http://www.wpxi.com/news/news/local/8-people-including-2-children-taken- 
hospital-after/nj ScC/ 

32. December 15, WLOS 13 Asheville - (North Carolina) Water department estimates 
water to return by Monday morning. A ruptured water line December 14 left as 
many as 15 businesses in West Asheville without water service for about 27 hours 
prompting some businesses to close for the day. A city water department official 
reported that the entire 14-foot water line would be repaired before service was restored 
December 15. 

Source: http://www.wlos.com/news/features/top-stories/stories/water-department- 
estimates-water-retum-monday-moming- 1 8905 .shtml 

33. December 14, KSBY 6 San Luis Obispo - (California) Fire heavily damages longtime 
Santa Maria business. A December 13 fire at the Mission Linen Supply business in 
Santa Maria caused an estimated $675,000 in damage to the structure and its contents. 
The fire was ruled accidental while the source of the blaze is still under investigation. 
Source: http ://w w w .ksby .com/news/fire-heavily-damages-longtime-santa-maria- 
business/ 
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Dams Sector 

Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://w'W'vv'. dhs.gov/IPDailvReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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